Cleartext password in log file

[d_war]

I was looking at my zimbra log file trying to determine why my zdesktop on 64-bit vista was hanging on the "loading" screen (turns out it was a huge sync), when I see my username and password to my zimbra account just sitting there between two <debug> tags in the log file. This is ridiculous. Sure its a beta, but lets refrain from writing cleartext passwords to a log file.

I have since moved to 64-bit Ubuntu, but there is no native 64-bit linux zdesktop. Since most power users are migrating to 64 bit linux, it would be great to have zdesktop on that platform without hacking to run a 32-bit version.

[jholder]

What version? This was fixed in Beta 2 or 3. We're now at 4.

[d_war]

I am running 0.91 build 1344, fresh off the website.

The offending debug statement was in my zdesktop.log file and it had this format:

2008-10-18 21:04:27,961 DEBUG [btpool0-8] [name=zimbra;ip=127.0.0.1;] request - <AuthRequest xmlns="urn:zimbraAccount"><account by="name">MYACCOUNT@MYHOST.COM</account><password>MYPLAINTEXTPASSWORD</password></AuthRequest>

I don't think that it is transmitting my password in cleartext to the zimbra server as I checked "use SSL" (which I don't know why that's not the default); this was stored in a local zimbra log file.